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We  have  developed  a  digital  signature  system  whose  security  rests 
primarily  on  the  existance  of  a  one-way  function.  Since  many  one¬ 
way  functions  are  known,  and  since  their  existence  is  essential  to  even 
conventional  authentication  systems,  the  security  of  the  new  system  is 
at  least  as  good  as  in  conventional  authentication.  The  security  of 
previously  known  digital  signature  systems  depends  on  the  difficulty  of 
factoring  and  related  problems  and  is  open  to  more  question.  There  is 
a  penalty  paid  for  this  security  in  the  increased  time  required  to 
compute  a  signature,  but  recent  modii ications  reduce  this  penalty  to 
an  acceptable  le/el . 

The  signature  system  uses  a  form  of  tree  authentication,  coupled 
with  a  one-way  harh  function  to  compress  a  large  authentication  file 
into  a  single  number  of  approximately  100  bits.  A  patent  disclosure 
has  been  ri!ed  and  a  paper  will  be  submitted  for  publication. 

We  have  also  developed  a  direct  demonstration  of  the  equivalence 
between  two  NP-complete  problems:  satisfiability  and  the  knapsack 
problems.  Applying  this  equivalence  to  the  circuitry  of  the  data 
encryption  standard  (DES)  results  in  a  10,000  dimensional  knapsack. 

If  the  DES  is  secure  then  it  follows  that  no  fast  general  algorithm 
exists  for  solving  10,000  dimensional  knapsacks. 

In  other  work  we  have  established  new  achievable  regions  for 
multiuser  communication  channels  with  feedback  and  privacy  constraints. 


Sate! 1 ization  arguments  involving  artifical  pre-  and  post-  channels 
proved  valuable  in  establishing  these  results.  A  paper  has  been 
submitted  to  the  Transactios  on  Information  Theory. 

One-way  functions  are  a  key  requirement  for  computationally 
secure  systems.  We  have  investigated  the  relationship  between  one¬ 
way  functions  and  random  functions,  in  an  attempt  to  obtain  a  method 
by  which  good  pseudorandom  functions  can  De  transformed  into  good  one¬ 
way  functions. 

One-way  functions  belong  to  the  class  NP  of  problems  whose  solutions 
can  be  checked  quickly  (in  polynomial  time).  Therefore,  if  P  =  NP, 
that  is,  if  every  problem  that  can  be  checked  quickly  can  also  be  solved 
quickly,  there  can  be  no  one-way  functions.  We  have  studied  computers 
augmented  with  subroutines  for  random  functions,  and  shown  that  for  these 
computers,  for  almost  all  choices  of  random  functions,  the  classes  NP 
and  P  are  different.  Thus,  with  the  aid  of  an  ideal  pseudorandom 
number  source,  we  can  generate  (not  uniquely  invertible)  one-way  functions. 
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